Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1be7bcf5-0538-4a92-9aef-c460f15023b4/466907d0-f56d-36c2-88cd-f7f59fa888e2.roa
File: 466907d0-f56d-36c2-88cd-f7f59fa888e2.roa (raw, json)
Hash identifier: F0KypCbUCtvCFtAaMfbSyubVFMzALhQayIXC5F5Zz1k=
Subject key identifier: 11:81:7B:3C:06:4D:D6:30:7E:FD:BF:BF:43:0C:50:3C:C2:B1:C5:91
Certificate issuer: /CN=1be7bcf5-0538-4a92-9aef-c460f15023b4
Certificate serial: 010D0C9F43285848BE652919DD0955E7ECC220C0
Authority key identifier: 45:94:2A:B5:6A:9D:7E:36:8F:49:09:AC:A5:80:7B:74:DE:0D:B7:67
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1be7bcf5-0538-4a92-9aef-c460f15023b4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1be7bcf5-0538-4a92-9aef-c460f15023b4/466907d0-f56d-36c2-88cd-f7f59fa888e2.roa
Signing time: Sun 02 Feb 2025 00:54:18 +0000
ROA not before: Sun 02 Feb 2025 00:54:18 +0000
ROA not after: Fri 02 May 2025 23:54:18 +0000
asID: 394144
IP address blocks: 23.152.56.0/24 maxlen: 24
198.135.179.0/24 maxlen: 24
2602:2cd::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:be:65:29:19:dd:09:55:e7:ec:c2:20:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1be7bcf5-0538-4a92-9aef-c460f15023b4
Validity
Not Before: Feb 2 00:54:18 2025 GMT
Not After : May 2 23:54:18 2025 GMT
Subject: CN=8cee3973-bcae-4d19-94c1-5159d9d92b62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:44:f6:d2:a0:b0:06:fd:91:8e:72:45:7d:65:
fe:6f:56:a8:f2:03:8b:53:f0:ed:66:db:80:9e:49:
10:52:aa:00:ef:5f:2e:3d:04:f2:c8:63:26:3e:51:
74:d6:34:23:35:f9:5c:d7:2f:c3:cc:72:60:be:c3:
97:da:61:a3:fa:dc:96:34:f9:72:db:67:04:52:50:
d5:15:e0:bf:fa:19:c9:ce:fb:77:c6:03:72:ee:01:
44:98:75:3b:55:46:67:d4:02:76:4f:fa:64:a8:dd:
68:23:c3:c2:40:36:ab:5b:00:00:db:de:02:ef:70:
b3:e3:2c:3b:98:13:ba:1f:1a:62:7b:c3:f0:c2:72:
87:20:6d:4c:4d:0e:01:89:ef:ed:34:a9:bc:bf:d1:
d4:5f:dd:ea:eb:63:ae:d7:80:70:6b:7b:8e:a9:1a:
2b:3a:3f:b7:38:d5:e4:b3:c5:81:52:14:17:50:0c:
ba:fa:db:d9:de:42:7e:fb:cd:5f:94:39:e7:86:13:
81:6f:7c:4a:34:c4:da:12:14:c1:4d:a0:26:39:61:
72:db:b5:c1:dc:52:cb:bc:5d:24:11:6d:cb:26:7e:
22:a1:04:e4:30:a2:be:b1:1e:89:31:58:af:98:78:
43:7a:ea:4e:71:0b:58:ef:84:22:26:91:f2:de:88:
65:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:81:7B:3C:06:4D:D6:30:7E:FD:BF:BF:43:0C:50:3C:C2:B1:C5:91
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1be7bcf5-0538-4a92-9aef-c460f15023b4/466907d0-f56d-36c2-88cd-f7f59fa888e2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1be7bcf5-0538-4a92-9aef-c460f15023b4/1be7bcf5-0538-4a92-9aef-c460f15023b4.crl
X509v3 Authority Key Identifier:
keyid:45:94:2A:B5:6A:9D:7E:36:8F:49:09:AC:A5:80:7B:74:DE:0D:B7:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1be7bcf5-0538-4a92-9aef-c460f15023b4.cer
sbgp-ipAddrBlock: critical
IPv4:
23.152.56.0/24
198.135.179.0/24
IPv6:
2602:2cd::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0f:75:2b:f8:1f:9d:c1:fc:a2:ea:f8:99:13:14:04:50:a2:9f:
1c:45:0d:d0:65:81:d0:03:b5:b5:42:ed:74:40:3e:81:2e:b3:
d5:d1:65:b8:66:03:b1:f0:d8:d9:18:de:b7:2b:f2:4c:2e:6e:
2e:55:bf:a0:62:5f:38:17:3f:45:3c:95:15:61:86:f3:d5:1d:
6d:3e:82:f4:02:5f:d0:7b:1a:b1:29:3d:5f:f6:77:c8:34:91:
b8:af:86:94:6d:0a:f5:62:10:9b:5b:04:dc:bc:76:df:0e:f0:
10:6f:5e:6b:87:74:a7:6f:7a:e5:db:21:49:a4:66:ea:38:73:
35:2d:8b:40:57:cb:0f:cc:74:81:d3:11:e7:95:ff:65:f6:05:
b9:46:f5:27:7e:5b:4e:59:f6:31:2d:be:bf:a3:27:67:8b:93:
e4:b5:95:c6:54:b0:4b:d0:65:f1:e6:ee:2d:6c:a3:a2:ac:13:
92:76:ff:5d:43:61:b2:11:a0:c0:fa:5a:c7:79:4c:8c:ff:10:
63:81:95:26:d4:c8:05:32:7a:fb:38:c4:3c:e3:3d:3a:93:8e:
1c:4b:49:46:f2:92:a6:b2:72:af:e4:f9:b4:db:f5:3c:1b:a9:
4a:83:e4:6e:e2:2f:dc:e6:31:6f:4b:77:71:ef:87:a4:f0:d7:
5d:9a:a2:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 07:11:20 2025 by rpki-client